“You may have missed an all-new enterprise-focused feature woven inside of Apple’s all-new MacBook Pro – its new T2 chip which fundamentally enhances the security of these computers,” Jonny Evans writes for Computerworld.

“The successor to the T1, Apple’s T2 chip enables secure boot and encrypted storage on the machine. It first appeared on the iMac Pro,” Evans writes. “It controls Touch ID (using a secure enclave), the Touch Bar and integrates numerous tasks which once required multiple controllers, such as the system management controller (SMC), image signal processor, ambient light sensor, and audio and SSD (solid-state drive) controllers.”

“What should be of most interest to enterprise users is that chips built-in support for on-the-fly encryption and secure boot,” Evans writes. “Secure boot will also verify the integrity of Boot Camp Windows volumes on a Mac.”

http://www.bombich.com covers this by referring to Apple’s knowledge base article on how to image/clone external disks:

If you are attempting to boot a Mac with an Apple T2 chip (e.g. a 2018 MacBook Pro or an iMac Pro) from your CCC bootable backup, be sure to configure your Mac to allow booting from an external hard drive. Apple describes the procedure in this Kbase article:

Do you have to set it up to boot from an external disk before the internal disk fails, or can it be done after and you are then trying to boot off of an external backup disk? It’s not clear from the descriptions.

Sure there is. Right before you backup. 🙂 I was in China on a project and was seconds from finishing offloading a bunch of seismic data from a bunch of instruments and taking my laptop to my room to back it up. Someone tripped on the Ethernet cable. Had to download everything again with a different laptop.